Privacy notice on data processing

THE DATA CONTROLLER

 

Solidarietà Intrapresa Soc. Coop Sociale ONLUS (hereinafter Solidarietà Intrapresa), based in Forlì in Via Campo Dei Fiori 3/B, is the Data Controller of the users' personal data collected when using the services of this website. Solidarietà Intrapresa will process the personal data provided in compliance with the principles of lawfulness, correctness,

1. Access to the website and navigation;
2. Management of requests for information and Customer Care;
3. Subscription to the information and promotional newsletter;
4. Registration, access to and management of the reserved area;
5. Management of the eCommerce service.

 

 

Data processing carried out in connection with the web services provided by this website takes place at the aforementioned headquarters of the Data Controller and of the Data Processor with servers in the EU.

 

 

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This data is not collected for the purpose of being associated with identified Data Subjects, but could - by its very nature, through processing and association with data held by third parties - allow users to be identified. This data category includes the IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to ascertain responsibility in case of computer crimes against the website or the Data Controller: except for this possibility, at present, the data on web contacts do not persist beyond the terms of the law. The optional, specific and voluntary sending of the e-mail address, as well as any other personal data included in the communication, to the addresses indicated on this website entails the subsequent acquisition of the sender's address by Solidarietà Intrapresa, necessary to respond to requests.

 

 

Through the functions present on the Solidarietà Intrapresa website, the user can therefore give some of his/her personal information that can make him/her identifiable and that can be processed in order to manage the latter's requests. The information that may be requested may include but is not limited to:

1. First and Last name
2. Address of domicile/residence
3. Order details, such as the history of fulfilled orders
4. Telephone number
5. Email address
6. The IP address of the device used
7. The pages visited by the User
8. The time and date on which the user visited the Site
9. Credit cards/bank references

 

 

For more information on the cookies used by this website, you can view the following Cookie Policy

 

 

Solidarietà Intrapresa will process users' personal data in a lawful, correct and transparent manner. The Data Controller will collect the personal data of users and will process it solely for the purposes indicated in this Privacy Policy in a way that is not incompatible with the purposes themselves. The data processed by Solidarietà Intrapresa will be adequate, relevant and limited to what is necessary for the purposes for which it is processed.

 

 

Solidarietà Intrapresa will process the personal data of Users who fill in the appropriate online forms to request information regarding the services offered by the Data Controller to manage, find and provide what is requested by Users. The data will be recorded, stored and used exclusively to manage and respond to the requests of the interested parties and for the time necessary to achieve the aforementioned purpose. The provision of data for this processing purpose is optional. However, the partial or incorrect provision of data or any failure to do so may make it impossible for Solidarietà Intrapresa to manage and follow up on user requests.

 

 

Solidarietà Intrapresa will process the personal data of Users who enter their e-mail address in the appropriate form to subscribe to the newsletter with informative, commercial and promotional content. The data will be recorded, stored and used exclusively for the registration of interested parties to the Controller's newsletter. The legal basis of the processing is the express consent of the Data Subject. The provision of data for this processing purpose is optional. However, failure, partial or incorrect provision of data may make it impossible for the Data Controller to subscribe the Data Subject to the newsletter service. The data will be processed until consent is revoked by the Data Subject (opt-out) in order to allow the latter to express their desire not to be contacted in the future.

 

 

Solidarietà Intrapresa will process the user's personal data to allow for use of the services reserved for registered users. The legal basis for this processing is the fulfilment of the contract or, depending on the case, the execution of pre-contractual measures adopted at the request of the Data Subject. For these purposes, the data will be processed for the time strictly necessary to carry out the individual processing activities. Solidarietà Intrapresa may, however, keep the data for a longer period of time to fulfil specific obligations established by Regulations and/or laws in force which the Data Controller is subject to. Solidarietà Intrapresa will process users' personal data to:

1. Allow the user to access and browse the Website;
2. Allow the user to register on the Website, create an account, and to use the services reserved for registered users, including the ability to purchase through the Website;
3. Maintain and manage the user's account;
4. Store user data and information in the account (personal data, order history, delivery addresses, etc.);
5. Allow the user the possibility to purchase products online through the Website and therefore allow the conclusion of the sales contract and the correct execution of the obligations;
6. Receive commercial communications to support the purchase and/or customer satisfaction.

The products can be purchased using a credit card. During the purchase procedure, the user must provide some financial information to complete the purchase and/or request an invoice (VAT number, tax code, etc.) To proceed with shipment of the product purchased online, the user must also provide the information required for said shipment (name, surname, shipping address, telephone number and e-mail address). The legal basis for the aforementioned processing is the fulfilment of the contract by Solidarietà Intrapresa and/or the conduct of commercial negotiations. For these purposes, the data will be processed for the time strictly necessary to carry out the individual processing activities and no later than 10 years from the time of purchase. If required by specific legislation, the data retention time may be longer. The provision of data for this processing purpose is optional. However, failure, partial or incorrect provision of data may make it impossible for the Data Controller to execute the online sales contract and for the user to obtain the requested product(s). Solidarietà Intrapresa may also process the e-mail address of the registered user to send out promotional offers and commercial communications. The legal basis that legitimises the sending of such communications is the legitimate interest of the Data Controller (Article 130, paragraph 4 of Legislative Decree 196/2003 and Recital 47 GDPR). The Data Subject may at any time oppose such processing by means of a specific unsubscribe link.

 

PROCESSING METHODS

 

The personal data is processed by automated means for the time strictly necessary to fulfil the objectives for which it was collected. The data is processed by technical personnel authorised for processing, duly instructed by Solidarietà Intrapresa. Specific safety measures are observed to prevent the loss of data, the illicit or incorrect use thereof, and unauthorised access.

 

 

The management and storage of personal data collected by the Data Controller will take place within the European Union and data will not be transferred outside the European Union.

 

 

The subjects to whom Solidarietà Intrapresa communicates the data collected act as Data Processors designated by the Data Controller through a specific contract or as persons authorised to process personal data under the direct authority of the Data Controller. The data being processed will in no case be disclosed.

 

 

Interested users of the Website have the right, pursuant to art. 15-22 GDPR, to:

1. Request for access to personal data: the user shall have the right to obtain from the Data Controller confirmation as to whether or not any personal data concerning him/her is being processed and, where that is the case, access to said personal data. Access can be directed to obtain the following information:
   1. Reasons for processing;
   2. the categories of personal data concerned;
   3. the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in Non-EU countries or international organisations;
   4. Retention period for personal data, or criteria used to determine this period;
   5. The existence of the right to request the Data Controller to correct or delete the data or to limit the processing or object to the same;
   6. Existence of an automated decision-making proc.
2. Request for rectification of personal data: the Data Subject has the right to obtain the correction of inaccurate personal data concerning them, as well as to obtain the integration of incomplete personal data.
3. Request for deletion of personal data: for the reasons indicated in art. 17 GDPR, the Data Subject shall have the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay and the Data Controller shall have the obligation to erase personal data provided that the data is not subject to a retention obligation pursuant to law.
4. Request for limitation of data processing: in the event that one of the situations referred to in art. 18 GDPR occurs, the Data Subject has the right to request the limitation of the processing of their personal data.
5. Request for data portability: the Data Subject has the right to receive in a structured, commonly used and readable format by an automatic device, any personal data provided to a Data Controller for the possibility of transmitting it to another Data Controller, where the processing is based on consent or a contract and is carried out by automated means.
6. Withdrawal of consent: the Data Subject has the right, at any time and with the ease with which he/she has given it, to withdraw consent to the processing of their personal data.

The Data Subject also has the right to lodge a complaint with the Italian Authority for the protection of personal data (www.garanteprivacy.it). Requests for the exercise of rights can be addressed to amministrazione@solidarietaintrapresa.it